slocker | 5251a356421340a45c8dc6d431ef8a8cbca4078a0305a87f4fbd552e9fc0793e[.]zip

General

Target

5251a356421340a45c8dc6d431ef8a8cbca4078a0305a87f4fbd552e9fc0793e.zip
Size

2.5MB
MD5

055c503171ebfabbb5e806cf24c19a82
SHA1

6d4be4625cb5f1a863beb6a1c0ee3e01df481697
SHA256

c9712bab276d477ce2db9c3777a58d149c29abdfb13f739a35a1aa6ed9883cd0
SHA512

089058fa36c8df864948c06aabfdbb554b39bd37ec491bf5d268dbb7508c444613667dc00c74765a339ff6498a864b41e4b4115f22132885b03e427071fa812a
SSDEEP

49152:g1OnmhJzHS7TiHLbZbP7mwnJcQMKpH3/QmFJszQUvnfoe:4zzHS7TiF7mOcRKFdscUPD

Score

10^/10

slocker

SLocker payload 1 IoCs

resource	yara_rule
static1/unpack001/5251a356421340a45c8dc6d431ef8a8cbca4078a0305a87f4fbd552e9fc0793e.apk	family_slocker_1

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA

5251a356421340a45c8dc6d431ef8a8cbca4078a0305a87f4fbd552e9fc0793e.zip
.zip

Password: infected
5251a356421340a45c8dc6d431ef8a8cbca4078a0305a87f4fbd552e9fc0793e.apk
.apk android

Password: infected

com.XPhantom.id

com.XPhantom.id.MainActivity

Activities

com.XPhantom.id.MainActivity

android.intent.action.MAIN

Permissions

android.permission.SYSTEM_ALERT_WINDOW
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.SET_WALLPAPER
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_CONTACTS
android.permission.READ_SMS
android.permission.ACCESS_FINE_LOCATION
android.permission.WAKE_LOCK
android.permission.INTERNET
android.permission.REQUEST_INSTALL_PACKAGE
android.permission.CAMERA

Receivers

com.XPhantom.id.BootReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON

Services